
10/580178 

0 «2 MAY 2006 



DESCRIPTION 

CONTENT REPRODUCTION APPARATUS 



Technical Field 

5 The present invention relates to a content reproduction apparatus, 
in particular to a content reproduction apparatus which reproduces 
digital contents. 

Background Art 

10 Under a digital content copyright protection method for a 

recording media such as an optical disc equivalent to a Digital 
Versatile Disc (DVD), a Secure Digital (SD) memory card, and a 
semiconductor recording media such as a memory stick, contents 
are encrypted and recorded in the media. The encrypted contents 

15 are decrypted with a key embedded in a content reproduction 
apparatus and reproduced. Under a license agreement with a 
licensor gives a license for use of the copyright protection method, 
a manufacturer of manufacturing a content reproduction apparatus 
receives a key necessary for decrypting the contents (hereafter 

20 referred to as "device key") with a license of manufacturing a 
content reproduction apparatus. 

The license agreement includes security implementation 
specifications (compliance rule, robustness rule). Following 
implementation conditions are enforced to the licensed 

25 manufacturer: ( i ) to implement the received device key in the 
i content reproduction apparatus in a format in which a certain level 

of 'security standard is satisfied; ( ii ) must not to output content 
data'iin plaintext decrypted in the content reproduction apparatus to 
outside of the content reproduction apparatus via a general external 

30 interface; and (iii) must not to output the content data to an user 
accessible bus in the content reproduction apparatus. 

In compliance with the security implementation specifications 
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by the mechanism and agreement of the content encryption using a 
device key, the contents recorded in the media can be prevented 
from, without permission, being copied to a hard disc and other 
recording media and being distributed to the Internet. 
5 However, the mechanism only cannot resist to the threat 

caused in the case where the protection implementation applied 
when the manufacturer embedded the device key in the content 
reproduction apparatus and the device key is disclosed. That is, an 
analyzer who disclosed the device key can generate and circulate an 
10 unauthorized copying tool so as to decrypt an encrypted content and 
copy on a hard disc based on the device key (i.e. ignoring the 
security implementation specifications). However, the content 
encryption mechanism only cannot prevent the malpractices by such 
analyzer. 

15 Accordingly, a key revocation technique has been introduced 

to many copyright protection methods as a countermeasure against 
the disclosure of the device key. As a specific method of key 
revocation, for example, there is a method disclosed in Intel 
Corporation et al., "Content Protection for Recordable Media 

20 Specification, Introduction and Common Cryptographic Elements/' 
Revision 1.0, January 17, 2003 (hereafter referred to as "relevant 
literature"). In this key revocation method, a unique device key is 
given to each content reproduction apparatus. Also, index 
information for identifying a device key (hereafter referred to as 

25 "device key index information") is assigned to each device key and 
given to each content reproduction apparatus with the device key. 
The content reproduction apparatus can decrypt the encrypted 
content based on the device key and the attached device key index 
information. 

30 Using this key revocation technique, even if a device key is 

disclosed, the device key can be revoked so that the revoked device 
key cannot decrypt contents to be written in a recording media 
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manufactured after the revocation or contents recorded in the 
recorded media manufactured after the revocation. Whereas the 
detail about the technique is disclosed in the relevant literature, 
further explanation is not provided in here. Thus, the key 
5 revocation technique can embed a unique device key in each content 
reproduction apparatus and separately revoke the disclosed device 
key. 

However, in the key revocation technique, it is necessary to 
embed a unique device key in each content reproduction apparatus. 

10 Also, the manufacturer has to work on so that device keys cannot be 
read out from outside based on the conditions in the license 
agreement. This is very inconvenient for the content reproduction 
apparatus manufacturer. Because, in the case of receiving a repair 
request of the content reproduction apparatus due to operation 

15 malfunction from an end user, it is necessary to know details of the 
device key embedded in the content reproduction apparatus in order 
to specify a malfunctioned part, in particular to judge whether or not 
the malfunction is occurring in the decryption processing unit. For 
example, under a circumstance where some device keys are actually 

20 revoked, it is necessary to know details of the device key in order to 
judge whether the content reproduction apparatus requested to be 
repaired is a content reproduction apparatus in which a revoked 
device key is embedded. However, since the details of the device 
key cannot be known as described above, it is a problem that 

25 whether or not the device key embedded in the content reproduction 
apparatus is revoked cannot be known. 

On the other hand, there is a following problem in another 
perspective. It is necessary to use a device key unique to each 
content reproduction apparatus. Also, a licensor of the copyright 

30 protection method needs to verify anytime about whether the 
manufacturer of the content reproduction apparatus as a licensee is 
not performing a malpractice such as embedding same device key 
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into a plurality of content reproduction apparatuses ignoring the 
license agreement. In order to fulfill this necessity, in the present 
circumstance, the device key is implemented so as not to be read 
out from the content reproduction apparatus. Therefore, there is a 
5 problem that the licensor of the copyright protection method cannot 
verify whether or not the same device key is embedded in the 
plurality of content reproduction apparatuses. 

In order to resolve above mentioned problems, an object of 
the present invention is to provide a content reproduction apparatus 
10 which can tell whether or not a device key embedded in a content 
reproduction apparatus is revoked or not. 

Further, another object is to provide a content reproduction 
apparatus which can verify whether the same device key is 
embedded in the plurality of content reproduction apparatuses. 

15 

Disclosure of Invention 

A content reproduction apparatus according to an aspect of 
the present invention is a content reproduction apparatus which 
reproduces digital contents, comprising: a secret information 

20 storage unit operable to hold secret information specific to the 
content reproduction apparatus in a manner which does not allow 
access from outside the content reproduction apparatus; an index 
information storage unit operable to hold index information which is 
in a one-to-one association with the secret information; an 

25 instruction receiving unit operable to receive an instruction to 
output the index information; and an index information output unit 
operable to output the index information stored in the index 
information storage unit to outside based on the instruction. 

According to this structure, the content reproduction 

30 apparatus can output the index information which is in a one-to-one 
association with the secret information. Therefore, even after the 
content reproduction apparatus is shipped as a product, it is 
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possible to verify, to which content reproduction apparatus, that the 
secret information (device key) embedded in the content 
reproduction apparatus is specific. 

Consequently, by examining the displayed index information, 
5 personnel of the manufacturer of the content reproduction 
apparatus and a licensor of the secret information and the index 
information can know about which secret information (device key) is 
embedded in the content reproduction apparatus. Therefore, the 
personnel of the content reproduction apparatus manufacturer can 

10 know whether or not the secret information (device key) embedded 
in the content reproduction apparatus is revoked or not by 
examining the index information. 

Also, the licensor can verify whether the same secret 
information (device key) is embedded in the plurality of the content 

15 reproduction apparatuses by examining whether or not the same 
index information is used in the plurality of the content reproduction 
apparatuses. 

Further, the index information stored in the index information 
storage unit is encrypted according to a predetermined 

20 cryptographic method, and the index information output unit may 
output, based on the instruction, the encrypted index information 
stored in the index information storage unit to outside. 

Even if the index information is encrypted, the same index 
information encrypted with the same key has a same value. 

25 Therefore, the licensor of the secret information can verify whether 
or not the same secret information (device key) is embedded in the 
plurality of the content reproduction apparatuses by examining 
whether or not the same index information is used in the plurality of 
the content reproduction apparatuses. 

30 Preferably, the content reproduction apparatus further 

comprises an authentication data storage unit operable to hold 
authentication data that is obtained by performing a predetermined 
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conversion on the index information. 

If the licensor only can know the predetermined conversion, a 
malpractice by a licensee of the secret information and the index 
information to output dummy index information from the content 
5 reproduction apparatus is prevented by examining whether or not 
the result by which the predetermined conversion is performed on 
the index information outputted from the content reproduction 
apparatus matches with the authentication data stored in the 
authentication data storage unit. 

10 Also, the instruction receiving unit may read a program for 

executing the instruction from a removable recording medium on 
which the program is recorded, and the index information output 
unit may output the index information stored in the index 
information storage unit to outside, by executing the read program. 

15 According to this structure, a disc reading unit which is 

previously placed in an ordinary content reproduction apparatus and 
a video output interface to outside can be used. Therefore, 
basically, the amount of costs required for adding a function to the 
ordinary content reproduction apparatus is small. 

20 Further, on the recording medium, a unique identification 

number is recorded, the instruction receiving unit reads the program 
and the identification number from the removable recording medium 
on which the program is recorded, and the index information output 
unit may output, to outside, the index information stored in the 

25 index information storage unit, by executing the read program only 
when the identification number satisfies a predetermined condition. 

According to this structure, only when a recording medium 
having a specific identification number is placed, the content 
reproduction apparatus can execute the program. The recording 

30 medium having the specific identification number is not 
commercially available so that only the development manufacturer 
of the content reproduction apparatus can obtain the recording 
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medium. Therefore, even if a general user can create a program for 
displaying the index information, the user 

cannot obtain the disc for maintenance. Consequently, the index 
information in the content reproduction apparatus cannot be 
5 browsed. 

Even if the program stored in the recording medium for 
maintenance is copied, the identification number of the recording 
medium differs with the identification number of a recording 
medium at a destination of the copying. Also, the identification 

10 number of the recording medium at the copying destination does not 
have authority to execute the program. Therefore, the content 
reproduction apparatus can make the program unavailable. 

Furthermore, the instruction receiving unit may be a 
communication terminal connected to a computer network. 

15 According to this structure, in the case where a DVD recorder 

having a communication interface for updating Electric Program 
Guide (EPG) information and reserving a video recording via a 
network is used as the content reproduction apparatus, it is not 
necessary to set an interface specific for obtaining the index 

20 information, by using the communication interface (I/F). 

Also, the instruction receiving unit may be a debug terminal 
used for connecting a debug apparatus to the content reproduction 
apparatus, the debug apparatus being used during development of 
the content reproduction apparatus. 

25 According to this structure, the index information can be 

displayed to the debug apparatus using a debug interface for 
developing the content reproduction apparatus. Therefore, it is not 
necessary to set an interface specific for obtaining the index 
information. 

30 Also, it can prevent the debug apparatus for developing the 

content reproduction apparatus and the general user without debug 
environment from browsing the index information without 
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authorization. 

A content reproduction apparatus according to one of other 
aspects of the present invention is a content reproduction apparatus 
which reproduces digital contents, comprising: a secret information 
5 storage unit operable to hold secret information specific to the 
content reproduction apparatus in a manner which does not allow 
access from outside the content reproduction apparatus; an index 
information storage unit operable to hold index information which is 
in a one-to-one association with the secret information; and a 

10 display unit operable to display the index information. 

According to this structure, the index information which is in 
a one-to-one association with the secret information can be easily 
known. Therefore, even after the content reproduction apparatus 
is shipped as a product, it is possible to verify, to which content 

15 reproduction apparatus, that the secret information (device key) 
embedded in the content reproduction apparatus is specific. 

Consequently, by examining the displayed index information, 
personnel of the manufacturer of the content reproduction 
apparatus and a licensor of the secret information and the index 

20 information can know about which secret information (device key) is 
embedded in the content reproduction apparatus. Therefore, the 
personnel of the content reproduction apparatus manufacturer can 
know whether or not the secret information (device key) embedded 
in the content reproduction apparatus is revoked or not by 

25 examining the index information. 

Also, the licensor can verify whether the same secret 
information (device key) is embedded in the plurality of the content 
reproduction apparatuses by examining whether or not the same 
index information is used in the plurality of the content reproduction 

30 apparatuses. 

Further, the index information stored in the index information 
storage unit may be encrypted according to a predetermined 
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cryptographic method, and a display unit may display the encrypted 
index information. 

Even if the index information is encrypted, the same index 
information encrypted with the same key has a same value. 
5 Therefore, the licensor of the secret information can verify whether 
or not the same secret information (device key) is embedded in the 
plurality of the content reproduction apparatuses by examining 
whether or not the same index information is used in the plurality of 
the content reproduction apparatuses. 

10 Further, a content reproduction system according to another 

one of other aspects of the present invention is a content 
reproduction system which reproduces digital contents, comprising: 
a content reproduction apparatus which reproduces the digital 
contents; and a user authentication server which performs user 

15 authentication, wherein the content reproduction apparatus 
includes: a secret information storage unit operable to hold secret 
information specific to the content reproduction apparatus in a 
manner which does not allow access from outside of the content 
reproduction apparatus; an index information storage unit operable 

20 to hold index information which is in a one-to-one association with 
the secret information; a user identification information 
transmission unit operable to transmit user identification 
information to the user authentication server; an instruction 
receiving unit operable to receive an instruction to output the index 

25 information; and an index information output unit operable to 
output, based on the instruction, the index information stored in the 
index information storage unit, the user authentication server 
includes: a user authentication unit operable to perform user 
authentication based on the user identification information received 

30 from the content reproduction apparatus; and an instruction 
transmission unit operable to transmit an instruction to output the 
index information to the content reproduction apparatus, based on a 
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result of the authentication performed by the user authentication 
unit- 
According to this structure, the content reproduction 
apparatus can output the index information which is in a one-to-one 
5 association with the secret information. Therefore, even after the 
content reproduction apparatus is shipped as a product, it is 
possible to verify, to which content reproduction apparatus, that the 
secret information (device key) embedded in the content 
reproduction apparatus is specific. 

10 Consequently, by examining the displayed index information, 

personnel of the manufacturer of the content reproduction 
apparatus and a licensor of the secret information and the index 
information can know about which secret information (device key) is 
embedded in the content reproduction apparatus. Therefore, the 

15 personnel of the content reproduction apparatus manufacturer can 
know whether or not the secret information (device key) embedded 
in the content reproduction apparatus is revoked or not by 
examining the index information. 

Also, the licensor can verify whether the same secret 

20 information (device key) is embedded in the plurality of the content 
reproduction apparatuses by examining whether or not the same 
index information is used in the plurality of the content reproduction 
apparatuses. 

Further, in the case where a DVD recorder having a 
25 communication interface for updating Electric Program Guide (EPG) 
information and reserving a video recording via a network is used as 
the content reproduction apparatus, it is not necessary to set an 
interface specific for obtaining the index information, by using the 
communication interface (I/F). 
30 Furthermore, a user authentication server performs user 

authentication of an operator of the content reproduction apparatus. 
Therefore, it can prevent the operator without authority from 
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browsing the index information without authorization. 

Note that, the present invention can be implemented not only 
as a content reproduction apparatus having such characteristic units 
and a content reproduction system, but also as a content 
5 reproduction method including the characteristic units included in 
the content reproduction apparatus as steps, and as a program for 
causing a computer to execute the steps included in the content 
reproduction method. Here, it is needless to say that such program 
can be distributed via a recording medium such as a CD-ROM and a 

10 communication network such as the Internet. 

According to a method of verifying the content reproduction 
apparatus specific information by the present invention, it is 
possible to verify what type of device key is embedded in the content 
reproduction apparatus even after the device key specific to the 

15 content reproduction apparatus is installed in a manner which the 
device key cannot be read from outside. 

Consequently, the present invention can provide a content 
reproduction apparatus which can tell whether the device key 
embedded in the content reproduction apparatus is revoked or not. 

20 Furthermore, the present invention can provide a content 

reproduction apparatus which can verify whether or not the same 
device key is embedded in the plurality of the content reproduction 
apparatuses. 

As further information about technical background to this 
25 application, the disclosure of Japanese Patent Application No. 
2004-007683 filed on January 15, 2004 including specification, 
drawings and claims is incorporated herein by reference in its 
entirety. 

30 Brief Description of Drawings 

These and other objects, advantages and features of the 
invention will become apparent from the following description 
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thereof taken in conjunction with the accompanying drawings that 
illustrate a specific embodiment of the invention. In the Drawings: 
FIG. 1 is an outside drawing showing a structure of a content 
reproduction system according to a first embodiment of the present 
5 invention. 

FIG. 2 is a block diagram showing an internal structure of the 
content reproduction apparatus. 

FIG. 3 is a flowchart showing a process executed by the 
content reproduction apparatus. 
10 FIG. 4 is a flowchart showing details of a device key index 

information obtainment process (S8 in FIG. 3). 

FIG. 5 is an outside drawing showing a structure of a content 
reproduction system according to a second embodiment of the 
present invention. 

15 FIG. 6 is a flowchart showing a process executed by a debug 

apparatus. 

FIG. 7 is a flowchart showing a process executed by a content 
reproduction apparatus. 

FIG. 8 is an outside drawing showing a structure of the 
20 content reproduction system according to a third embodiment of the 
present invention. 

FIG. 9 is a flowchart showing a process executed by a server. 

FIG. 10 is a flowchart showing a process executed by the 
content reproduction apparatus. 
25 FIG. 11 is an outside drawing showing a structure of a content 

reproduction system according to a fourth embodiment of the 
present invention. 

FIG. 12 is a flowchart showing a process executed by a 
computer terminal apparatus. 
30 FIG. 13 is a flowchart showing a process executed by a 

content reproduction apparatus. 

FIG. 14 is an outside drawing of the content reproduction 
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apparatus. 

FIG. 15 is a drawing showing when a cover of the content 
reproduction apparatus shown in FIG. 14 is removed. 

FIG. 16 is a diagram showing an example of a device key 
5 index information display unit. 

Best Mode for Carrying Out the Invention 

Hereafter, it is explained about embodiments of the present 
invention with reference to drawings. In the embodiments 
10 explained hereafter, a content reproduction system which obtains 
device key index information embedded in a content reproduction 
apparatus is explained. 

(First Embodiment) 

FIG. 1 is an outside drawing showing a structure of a content 
15 reproduction system 100 according to a first embodiment of the 
present invention. 

The content reproduction system 100 is a system not only for 
reproducing digital contents, but also for displaying device key 
index information stored in a content reproduction apparatus. It 
20 includes a content reproduction apparatus 1, a display apparatus 3 
and an optical disc 2. 

The content reproduction apparatus 1 is an apparatus which 
decrypts and reproduces a digital content encrypted using a device 
key and device key index information attached to and associated in 
25 one to one with the device key. The device key and the device key 
index information are embedded and stored in the content 
reproduction apparatus 1. 

The display apparatus 3 is an apparatus which displays video 
data outputted from the content reproduction apparatus 1 on a 
30 screen. 

The optical disc 2 is a recording medium in which a program 
for displaying details of the device key index information embedded 
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in the content reproduction apparatus 1 to the display apparatus 3. 

Here, as an example of the content reproduction apparatus 1, 
there are a DVD player, a DVD recorder, a Blu-ray Disc (BD) recorder 
and the like. Also, as an example of the optical disc 2, there are a 
5 DVD, a BD, a CD and the like. Further, the content reproduction 
apparatus 1 and the display apparatus 3 have an interface for 
inputting and outputting video. As the interface for video 
input/output, an RGB terminal, a video terminal, an S terminal, a D 
terminal and the like are designed and the content reproduction 
10 apparatus 1 and the display apparatus 3 are connected to each other 
via a connection cable in accordance with each of the terminals. 

FIG. 2 is a block diagram showing an internal configuration of 
the content reproduction apparatus 1 according to the present 
embodiment. 

15 As described above, the content reproduction apparatus 1 is 

an apparatus which decrypts and reproduces an encrypted digital 
content. It includes a main processing unit 10, a video processing 
unit 11, a video output unit 12, a debag external interface (I/F) 13, 
a communication I/F 14, a disc reading unit 15, cryptographic 

20 processing unit 17, a RAM 18, a device ID storage unit 19, a device 
key storage unit 110, a program storage unit 111, a user 
authentication unit 20, and a data bus 16. 

The main processing unit 10 is a processing unit which 
controls each processing unit included in the content reproduction 

25 apparatus 1, inputting and outputting of each interface, and reading 
and writing data from each storage unit. The main processing unit 
10 includes a device key index information obtainment processing 
unit 10a. The device key index information obtainment processing 
unit 10a is a processing unit for obtaining device key index 

30 information 19a stored in the device ID storage unit 19 explained 
hereafter. 

The video processing unit 11 is a processing unit which 
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creates data for screen display by which the display apparatus 3 
converts data processed in the content reproduction apparatus 1 
into a data format which can be displayed on a screen. The video 
processing unit 11 includes a device key index information output 
5 processing unit 11a which outputs the device key index information 
19a obtained by the device key index information obtainment 
processing unit 10a via the video output unit 12. 

The video output unit 12 is a processing unit which outputs 
the data for screen display to the display apparatus 3. As the video 

io output unit 12, an RGB terminal, a video terminal, a S terminal, a D 
terminal and the like are envisioned. 

The debug external I/F 13 is a data input/output interface 
between a debug device 41 which is explained in a second 
embodiment and the content reproduction apparatus 1. As the 

15 debug external I/F 13, a Joint Test Action Group (JTAG) terminal and 
the like are envisioned. The debug external I/F 13 includes an 
instruction code receiving unit 13a which receives an instruction 
code which received from the debug device 41. 

The communication I/F 14 is a communication interface for 

20 connecting the content reproduction apparatus 1 to an external 
network such as a Local Area Network (LAN) explained in third and 
fourth embodiments. As the communication I/F 14, a LAN terminal 
and the like is envisioned. The communication I/F 14 includes an 
instruction code receiving unit 14a which receives an instruction 

25 code via a network 5. 

The disc reading unit 15 is a processing unit which reads data 
recorded on an optimal disc inserted into the content reproduction 
apparatus 1 and writes data onto the optical disc. The disc reading 
unit 15 includes a program reading unit 15a which reads a program 

30 stored in the optical disc 2 and transfers to the main processing unit 
10. 

The cryptographic processing unit 17 is a processing unit 
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which performs cryptography (encryption and/or decryption) 
necessary for reproducing content. 

The RAM 18 is a recording apparatus which temporally holds a 
program and processing data in the content reproduction apparatus 
5 1. 

The device ID storage unit 19 is a storage apparatus which 
holds the device key index information 19a attached to the device 
key embedded in the content reproduction apparatus 1. 

The device key storage unit 110 is a storage unit which holds 
10 a device key 110a. 

The program storage unit 111 is a storage unit which holds a 
program for obtaining device key index information (device key 
index information obtainment processing program 111a) executed 
by the device key index information obtainment processing unit 10a. 
15 As will be explained in the third embodiment, the user 

authentication unit 20 is a processing unit which requests for 
connection to a server (not shown in the diagram) connected via the 
network 5. 

The data bus 16 is an internal data bus for mutually 
20 connecting modules other than the video output unit 12 each other 
and transferring data among modules. 

The device key index information 19a and the device key 110a 
are encrypted by a predetermined cryptographic method such as a 
Data Encryption Standard (DES) encryption and stored respectively 
25 in the device ID storage unit 19 and the device key storage unit 110. 
A key used for encrypting the device key index information 19a and 
the device key 110a (master key 17a) are stored in the encryption 
processing unit 17 so as not to be read out from outside of the 
content reproduction apparatus. 
30 The program storage unit 111 holds a program for performing 

a process in the content reproduction apparatus 1. This program 
includes the device key index information obtainment processing 



- 16- 



program 111a in which a process for outputting the device key index 
information 19a to the outside according to an external instruction is 
described. Also, these programs are compressed in data and 
recorded in the program recording unit 111, decompressed in data 
5 when the content reproduction apparatus 1 is powered and 
transferred to the RAM 18. 

Next, in the content reproduction system 100 according to the 
present embodiment, it is explained about a process of outputting 
the device key index information 19a recorded in the content 
10 reproduction apparatus 1 to the outside. 

FIG. 3 is a flowchart showing a process executed by the 
content reproduction apparatus 1. 

As shown in FIG. 1, a user inserts, into a disc insertion slot Id 
of the content reproduction apparatus 1, the optical disc 2 in which 
15 a program for displaying the device key index information 19a is 
stored. 

The disc reading unit 15 shown in FIG. 2 judges whether or 
not the optical disc 2 is inserted into the disc insertion slot Id (S2). 
After the optical disc 2 is inserted to the disc insertion unit Id (YES 
20 at S2), the program reading unit 15a reads the program written on 
the optical disc 2 (S4). The program reading unit 15a transfers the 
read program to the device key index information obtainment 
processing unit 10a of the main processing unit 10 via the data bus 
16 (S6). 

25 The device key index information obtainment processing unit 

10a reads an instruction code for outputting the device key index 
information 19a included in the read program (S7). The device key 
index information obtainment processing unit 10a executes, 
according to the instruction code, a device key index information 

30 obtainment processing program 111a stored in the RAM 18 (S8). It 
is explained later about details of the process executed by the 
device key index information obtainment processing unit 10a (S8). 
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The device key index information output processing unit 11a 
converts the device key index information 19a obtained by the 
process (S8) into a data format which can be displayed by the 
display apparatus 3 in the video processing unit 11. After that, it 
5 displays the converted device key index information 19a to the 
display apparatus 3 via a connection cable (not shown in a diagram) 
connecting it to the video output unit 12 and the display apparatus 
3 (S10). 

Next, it is explained about details of the process (S8) 
10 executed by the device key index information obtainment 

processing unit 10a. FIG. 4 is a flowchart showing details of the 

process (S8 in FIG. 3). 

The device key index information obtainment processing unit 

10a reads encrypted device key index information stored in the 
15 device ID storage unit 19 (hereafter referred to as "encrypted device 

key index information") and outputs to the cryptographic processing 

unit 17 (S12). The cryptographic processing unit 17 decrypts the 

encrypted device key index information using the master key 17a 

(S14). 

20 Through the above mentioned process, the device key index 

information 19a is displayed to the display apparatus 3. 
Accordingly, personnel from the manufacturer of the content 
reproduction apparatus and the licensor can know about which 
device key 110a is embedded in the content reproduction apparatus 

25 1 by examining the displayed device key index information 19a. 

Therefore, the personnel from the content reproduction 
apparatus manufacturer can know about whether the device key 
embedded in the content reproduction apparatus 1 is revoked or not 
by examining the device key index information 19a. 

30 Also, the licensor can verify whether the same device key 

110a is embedded in the plurality of content reproduction 
apparatuses 1 or not by examining whether the same device key 
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index information 19a is used in the plurality of content reproduction 
apparatuses 1 or not. 

Here, the following is an effect specific to the first 
embodiment. That is, according to the content reproduction 
5 system 100 in the first embodiment, the disc reading unit 15 which 
has been implemented in the content reproduction apparatus 1 and 
a video output interface to the outside (the video processing unit 11 
and the video output unit 12) can be used. Therefore, it is basically 
needed only to add the device key index information obtainment 
10 processing program 111a for outputting the device key index 
information 19a to the content reproduction apparatus 1 so that 
costs for adding functions remain less. 

(Second Embodiment) 

A content reproduction system according to the second 
15 embodiment of the present invention differs with the content 

reproduction system 100 according to the first embodiment. Other 

than reproducing digital contents, it displays the device key index 

information 19a stored in the content reproduction apparatus to the 

debug apparatus which is described later. 
20 FIG. 5 is an outside drawing showing a structure of the 

content reproduction system 200 according to the second 

embodiment of the present invention. 

The content reproduction system 200 includes a content 

reproduction apparatus 1, a debug apparatus 41, a display 
25 apparatus 42, and an input apparatus 43. 

The content reproduction apparatus 1 has a similar 

configuration as that of the content reproduction apparatus 1 shown 

in the first embodiment. Therefore, the detailed explanation about 

the structure is not repeated in here. 
30 The debug apparatus 41 is an apparatus for debugging a 

program and the like stored in the content reproduction apparatus 1. 

The display apparatus 42 is an apparatus which receives an output 
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from the debug apparatus 41 and displays the output on a screen. 
The input apparatus 43 is an apparatus for inputting the input 
received from an operator of the debug apparatus 41 to the debug 
apparatus 41. 

5 Here, the debug apparatus 41 is same as the debug apparatus 

used in a development of the content reproduction apparatus 1. 
The content reproduction apparatus 1 and the debug apparatus 41 
have debug terminals, for example, such as JTAG and these 
terminals are connected to each other by a connection cable 

10 corresponding to a terminal for connecting debug apparatus such as 
the JTAG cable. Further, the debug apparatus 41 and the display 
apparatus 42, and the debug apparatus 41 and the input apparatus 
43 respectively connected to each other through a connection cable 
corresponding to a debug terminal used in the debug apparatus 41. 

15 Next, in the content reproduction system 200 according to the 

present embodiment, it is explained about a process of outputting 
the device key index information 19a stored in the content 
reproduction apparatus 1 to the outside. FIG. 6 is a flowchart 
showing a process executed by the debug apparatus 41. FIG. 7 is a 

20 flowchart showing a process executed by the content reproduction 
apparatus 1. 

The operator of the debug apparatus 41 starts the debug 
apparatus 41 in a state where it is connected to the content 
reproduction apparatus i. Next, the operator inputs an instruction 
25 for displaying the device key index information 19a in the content 
reproduction apparatus 1 into the debug apparatus 41 using the 
input apparatus 43. 

As shown in FIG. 6, when the instruction is inputted from the 
input apparatus 43 (YES at S22), the debug apparatus 41 transmits 
30 a predetermined instruction code for outputting the device key index 
information 19a to the content reproduction apparatus 1 (S24). 

In the case of receiving the device key index information 19a 
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from the content reproduction apparatus 1 (YES at S26), the debug 
apparatus 41 converts the received device key index information 
19a into a data format which can be displayed on a screen of the 
display apparatus 42 and transmits to the display apparatus 42 
5 (S28). The display apparatus 42 displays the received device key 
index information 19a after the data conversion on the screen 
(S30). 

Next, it is explained about a process executed by the content 
reproduction apparatus 1. As shown in FIG. 7, when the instruction 

10 code receiving unit 13a of the debug external I/F 13 receives the 
predetermined instruction code transmitted by the debug apparatus 
41 (YES at S32), the device key index information obtainment 
processing unit 10a executes the device key index information 
obtainment processing program 111a stored in the PAM 18 (S36). 

15 After that, the device key index information obtainment processing 
unit 10a transmits the device key index information 19a to the 
debug apparatus 41 (S38). 

The process executed by the device key index information 
obtainment processing unit 10a (S36) is same as what is explained 

20 with reference to FIG. 4. Therefore, the detailed explanation about 
the process is not repeated in here. 

As explained in the above, according to the second 
embodiment, the following effect specific to the second embodiment 
is performed in addition to the effect indicated in the first 

25 embodiment. 

That is, according to the content reproduction system 200 in 
the second embodiment, the device key index information 19a can 
be displayed to the display apparatus 42 of the debug apparatus 41 
using a debug interface for a development of the content 

30 reproduction apparatus 1 as it is. Therefore, there is a merit that a 
specific interface for obtaining the device key index information 19a 
is not necessarily set in the content reproduction apparatus 1. 
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In addition, using an interface for debug, it can be prevented 
a debug apparatus for a development of a content reproduction 
apparatus, general user without having a debug environment and 
the like from browsing the device key index information 19a without 
5 permission. 

(Third Embodiment) 

A content reproduction system according to the third 
embodiment of the present invention differs with the content 
reproduction system 100 in the first embodiment and the content 

10 reproduction system 200 in the second embodiment- It is a system 
of not only reproducing digital contents, but also displaying the 
device key index information only when an authentication by a 
server which is described later is performed. 

FIG, 8 is an outside drawing showing a structure of a content 

15 reproduction system 300 according to the third embodiment of the 
present invention. The content reproduction system 300 includes a 
content reproduction apparatus 1, a display apparatus 3 and a 
server 6. The content reproduction apparatus 1 and the server 6 
are connected to each other via a network 5 such as the Internet. 

20 The content reproduction apparatus 1 and the display 

apparatus 3 respectively have same structures as those of the 
content reproduction apparatus 1 and display apparatus 3 shown in 
the first embodiment. Therefore, the detailed explanation about 
the same structures is not repeated in here. 

25 The server 6 is an apparatus of transmitting an instruction 

code for outputting the device key index information 19a stored in 
the content reproduction apparatus 1 to the content reproduction 
apparatus 1 which performed user authentication. 

The content reproduction apparatus 1 has a communication 

30 I/F 14 for connecting to the network 5. Specifically, a LAN terminal 
and the like are envisioned. 

Next, in the content reproduction system 300 in the present 
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embodiment, it is explained about a process of outputting the device 
key index information 19a stored in the content reproduction 
apparatus 1. FIG. 9 is a flowchart showing a process executed by 
the server 6. FIG. 10 is a flowchart showing a process executed by 
5 the content reproduction apparatus 1. 

As shown in FIG. 9, the server 6 judges whether a connection 
request from the content reproduction apparatus 1 to the server 6 is 
received or not (S52). Here, the content reproduction apparatus 1 
transmits a name of a user who operates the content reproduction 

10 apparatus 1 and a password corresponding to the user name. The 
server 6 receives the user name and the password and judges that 
the connection request to the server 6 is received. In the case of 
receiving the connection request to the server 6 (YES at S52), the 
server 6 judges whether or not a user authentication is successful by 

15 judging whether the pair of the user name and the password 
included in the received connection request is previously registered 
at the server 6 (S54). That is, the server 6 judges that the user 
authentication is successful when the pair of the user name and the 
password is previously registered at the server 6. Here, the pair of 

20 the user name and the password registered at the server 6 is a pair 
of a user name and a password of those who has an authority of 
executing displaying the device key index information. 

When the user authentication is successful (YES at S54), the 
server 6 transmits an instruction code for outputting the device key 

25 index information 19a to the content reproduction apparatus 1 via 
the network 5 (S56) and terminates the process. When the user 
authentication is failed (NO at S54), the server 6 terminates the 
process without transmitting the instruction code. 

Next, it is explained about a process executed by the content 

30 reproduction apparatus 1. The operator of the content 
reproduction apparatus 1 performs predetermined operations on the 
content reproduction apparatus 1 and displays a content 
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reproduction apparatus maintenance menu (not shown in the 
diagram) to the display apparatus 3 in order to obtain the device key 
index information 19a embedded in the content reproduction 
apparatus 1. For example, the content reproduction maintenance 
5 menu may be displayed to the display apparatus 3 by setting a 
switch (not shown in the diagram) specific to transfer to a 
maintenance mode on a body of the content reproduction apparatus 
1 and pushing the switch by the operator. 

The operator selects a menu of "executing process of 

10 obtaining device key index information". Herein, the menu 
selecting operation by the operator may be performed using an 
operation button (not shown in the diagram) set on the body of the 
content reproduction apparatus 1 or using a remote controller (not 
shown in the diagram) attached to the content reproduction 

15 apparatus 1. 

After selecting the menu, the operator inputs a user name and 
a password. When the operator inputs the user name and the 
password, the main processing unit 10 of the content reproduction 
apparatus 1 transmits the user name and the password via the 

20 communication I/F 14 and the network 5 to the server 6 and 
transmits the connection request to the server 6 (S42). 

When the user authentication is successful in the server 6, as 
described above, an instruction code for outputting the device key 
index information 19a is transmitted from the server 6 (S 56 in FIG. 

25 10). Accordingly, when the instruction code receiving unit 14a of 
the communication interface I/F 14 receives the instruction code 
transmitted from the server 6 (YES at S44), the device key index 
information obtainment processing unit 10a executes the device key 
index information obtainment processing program 111a stored in 

30 the RAM 18 (S48). 

The device key index information output processing unit 11a 
converts the device key index information 19a obtained by the 
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process (S48) into a data format which can be displayed to the 
display apparatus 3 in the video processing unit 11. After that, the 
converted device key index information 19a is displayed to the 
display apparatus 3 via a connection cable (not shown in the 
5 diagram) connecting to the video output unit 12 and the display 
apparatus 3 (S50). 

The process executed by the device key index information 
obtainment processing unit 10a (S48) is same as what is explained 
with reference to FIG. 4. Therefore, the detailed explanation about 
10 the process is not repeated in here. 

As explained in the above, according to the third embodiment, 
there is a following unique effect in addition to the effect according 
to the first embodiment. 

That is, according to the content reproduction system 300 in 
15 the third embodiment, for example, in the case of where a DVD 
recorder having a communication interface for performing update of 
EPG information and a recording reservation via the network is used 
as the content reproduction apparatus 1, using the communication 
I/F 14, there is a merit that an interface specific for obtaining the 
20 device key index information 19a is unnecessary to be set. 

Also, the server 6 authenticates whether the operator of the 
content reproduction apparatus 1 has an authority of browsing the 
device key index information or not. Therefore, it can prevent an 
operator without the authority from browsing the device key index 
25 information without permission. 

(Fourth Embodiment) 

A content reproduction system according to a fourth 
embodiment of the present invention differs with the content 
reproduction systems 100 to 300 respectively accordingly to the 
30 first to third embodiments. It is a system, in addition of 
reproducing digital contents, of displaying device key index 
information to a display apparatus connected to a computer terminal 
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apparatus connected to a network. 

FIG. 11 is an outside drawing showing a structure of a content 
reproduction system 400 according to the fourth embodiment of the 
present invention. The content reproduction system 400 includes a 
5 content reproduction apparatus 1, a computer terminal apparatus 
71, a display apparatus 72 and an input terminal apparatus 73. The 
content reproduction apparatus 1 and the computer terminal 
apparatus 71 are connected to each other via a network 5 such as 
LAN. 

10 The content reproduction apparatus 1 has a same 

configuration as the content reproduction apparatus 1 shown in the 
first embodiment. Therefore, the detailed explanation is not 
repeated in here. 

The computer terminal apparatus 71 is an ordinary computer 

15 terminal apparatus. The display apparatus 72 is an apparatus 
showing display information outputted from the computer terminal 
apparatus 71 to a screen. The input terminal apparatus 73 is an 
apparatus which inputs data to the computer terminal apparatus 71. 
The content reproduction apparatus 1 and the computer 

20 terminal apparatus 71 have an interface for connecting to the 
network 5. Specifically, it is envisioned to be a LAN terminal and 
the like. Also, a program for monitoring device key index 
information 19a in the content reproduction apparatus 1 is installed 
in the computer terminal apparatus 71. 

25 Next, in the content reproduction system 400 according to the 

present embodiment, a process of outputting the device key index 
information 19a stored in the content reproduction apparatus 1 is 
explained. FIG. 12 is a flowchart showing processes executed by 
the computer terminal apparatus 71. FIG. 13 is a flowchart 

30 showing a process executed by the content reproduction apparatus 
1. 

First, in a state where the content reproduction apparatus 1 



-26- 



and the computer terminal apparatus 71 are connected to each 
other via the network 5, an operator of the content reproduction 
apparatus 1 turns power of the content reproduction apparatus 1 on 
and transfers, from a program storage unit 111 to a RAM 18, a 
5 device key index information obtainment processing program 111a 
for monitoring the device key index information 19a. 

Next, the operator of the computer terminal apparatus 71 
inputs, using the input terminal apparatus 73, an instruction for 
displaying the device key index information 19a to the computer 

io terminal apparatus 71. 

Responding to the input of the instruction (YES at S72), the 
computer terminal apparatus 71 transmits an instruction code for 
displaying the device key index information 19a to the content 
reproduction apparatus 1 via the network 5 (S74). 

15 When the computer terminal apparatus 71 receives the device 

key index information 19a from the content reproduction apparatus 
1 (YES at S76), it converts the received device key index information 
19a into a data format which can be displayed on a screen of the 
display apparatus 72 and transmits to the display apparatus 72 

20 (S78). The display apparatus 72 displays the received device key 
index information 19a after data conversion on the screen (S80). 

Next, a process executed by the content reproduction 
apparatus 1 is explained. As shown in FIG. 13, when an instruction 
code receiving unit 13a of a debug external I/F 13 receives the 

25 predetermined instruction code transmitted from the computer 
terminal apparatus 71 (YES at S62), a device key index information 
obtainment processing unit 10a executes the device key index 
information obtainment processing program 111a stored in the 
RAM 18 (S66). After that, the device key index information 

30 obtainment processing unit 10a transmits the device key index 
information 19a to the computer terminal apparatus 71 (S68). 

The process executed by the device key index information 
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obtainment processing unit 10a (S68) is same as what is explained 
with reference to FIG. 4. Therefore, the detailed explanation about 
the same process is not repeated in here. 

As explained in the above, the fourth embodiment has a 
5 following effect in addition to the effect shown in the first 
embodiment. 

That is, according to the content reproduction system 400 in 
the fourth embodiment, for example, when a DVD recorder and the 
like having a communication interface for updating EPG information 

10 and making a reservation for recording via the network are used as 
the content reproduction apparatus 1, there is a merit that a special 
interface for obtaining the device key index information 19a is 
unnecessary to be set using the communication I/F 14. 

As explained in the above, according to the first to fourth 

15 embodiments of the present invention, device key index information 
19a unique to the content reproduction apparatus 1 can be displayed 
in some ways. Also, as explained in the above, the device key index 
information 19a is in a one-to-one association with the device key 
110a. Therefore, personnel of the content reproduction apparatus 

20 manufacturer and a licensor can know about which device key 110a 
is embedded in the content reproduction apparatus 1 by examining 
the displayed device key index information 19a. 

Accordingly, the personnel of the content reproduction 
apparatus manufacturer can know whether the device key 

25 embedded in the content reproduction apparatus 1 is revoked or not 
by examining the device key index information 19a. 

Also, the licensor can verify whether or not a same device key 
110a is embedded in the plurality of the content reproduction 
apparatuses 1 by examining whether the same device key index 

30 information 19a is not used in the plurality of the content 
reproduction apparatuses 1. 

In the above, it is explained about the content reproduction 
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system according to the present invention based on the embodiment. 
However, the present invention is not limited to the context of this 
embodiment. 

For example, in the embodiment, the device key index 
5 information 19a is encrypted and stored in the device key storage 
unit 110. However, it may be stored without the encryption. In 
this case, data read out from the device key storage unit 110 may be 
outputted to outside as they are when the device key index 
information 19a is outputted to the outside. 

10 Also, in the embodiment, the encrypted device key index 

information 19a is outputted to the outside after being decrypted at 
the cryptographic processing unit 17. However, the encrypted 
device key index information may be outputted to the outside as 
they are. In this case, it is assumed that a master key 17a for 

15 decrypting the encrypted device key index information is not stored 
in the cryptographic processing unit 17. 

Each apparatus which receives the encrypted device key 
index information from the content reproduction apparatus 1 stores 
a key for decryption and may obtain the device key index 

20 information 19a by decrypting the encrypted device key index 
information. 

Also, the encrypted device key index information 19a may be 
displayed to each display apparatus as they are. Further, each 
display apparatus may display the device key index information 19a 

25 which is decrypted by the cryptographic processing unit 17 and is 
further encrypted with another key. 

The pieces of encrypted device key index information 
obtained by encrypting the same pieces of device key index 
information even have a same value. Therefore, the licensor can 

30 verify whether or not the same device key 110a is embedded in the 
plurality of the content reproduction apparatuses 1 by examining 
whether or not the same encrypted device key index information is 
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used by the plurality of the content reproduction apparatuses 1. 

Furthermore, a key for decrypting the encrypted device key 
index information is secretly held by a manufacturer of each content 
reproduction apparatus so that the manufacturer only may be 
5 allowed to know the device key index information 19a. 
Consequently, the manufacturer which manufactured the content 
reproduction apparatus only can know the device key index 
information 19a. 

Also, the present invention in the first embodiment provides a 

io structure in which the optical disc 2 is inserted into the content 
reproduction apparatus 1. However, it may be a semiconductor 
recording media such as a SD memory card or a memory stick, an IC 
card and the like. 

Further, in the first embodiment of the present invention, the 

15 following mechanism may be added in order to prevent a general 
user from creating an optical disc holding a program for displaying 
the device key index information 19a, and browsing the device key 
index information 19a in the content reproduction apparatus. 

First, an ID unique to each optical disc 2 is written in a ROM 

20 area of the disc when the disc is manufactured. For example, in the 
case of DVD, an ID may be written in a Burst Cutting Area (BCA). 
Then, an instruction code for displaying the device key index 
information 19a is executed by the content reproduction apparatus 
1 only in the case where a disc having a specific ID is inserted. The 

25 optical disc 2 having this specific ID is not commercially available 
but only a development manufacturer of the content reproduction 
apparatus can obtain as a disc for maintenance. 

Consequently, even if general user can create a program for 
displaying the device key index information 19a, he/she cannot 

30 obtain the disc for maintenance. Therefore, the device key index 
information 19a in the content reproduction apparatus 1 cannot be 
browsed. 
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Suppose if the program stored in the disc for maintenance is 
copied, an ID of the optical disc 2 differs with an ID of a disc of the 
copying destination. Also, the ID of the copying destination does 
not have authority of issuing an instruction. Therefore, the content 
5 reproduction apparatus 1 can make the program unavailable. 

Additionally, in the case where the manufacturer of the 
content reproduction apparatus whose licensor of the copyright 
protection method is a licensee applies the structure of the present 
invention for a purpose of verifying whether a device key 110a which 

10 is unique to a content reproduction apparatus is correctly embedded, 
the device key index information obtainment processing program 
111a and the like for outputting the described device key index 
information 19a to the outside may be enforced to be implemented 
in the content reproduction apparatus by a license and the like. 

15 However, following problems remain. 

That is, it is a malpractice that, whereas the device key index 
information obtainment processing program 111a itself is 
implemented, the device key index information 19a outputted by 
executing the device key index information obtainment processing 

20 program 111a differs with what is actually embedded. 

Specifically, whereas the same device key 110a and the 
device key index information 19a are embedded in the plurality of 
the content reproduction apparatuses 1, each of the content 
reproduction apparatuses responds to the received instruction code 

25 and can work a malpractice such as outputting false device key 
index information 19a which differs for each of the content 
reproduction apparatuses. Such malpractice can cause the licensor 
to think that a unique device key 110a is embedded in each of the 
content reproduction apparatuses 1. This malpractice can be 

30 prevented as follows. 

Defining the device key index information 19a is DI, a check 
information P=F(DI) is obtained by performing a secret conversion F 
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about which only the licensor knows. As for F, for example, a 
cryptographic process of a secret key cryptographic method in which 
a key is secret except for the licensor can be used. When the 
licensor issues a device key 110a to the content reproduction 
5 apparatus manufacturer that is the licensee, the licensor issues the 
check information P in addition to the device key 110a and the 
device key index information 19a (DI). The licensee is enforced to 
implement a program for combining and displaying the device key 
index information 19a (DI) and the check information P in the 

10 content reproduction apparatus by a license and the like. 

Consequently, even if the licensee creates false device key 
index information 19a, it cannot forge the corresponding check 
information P. Therefore, even if the content reproduction 
apparatus 1 outputs the false device key index information 19a (DI), 

15 it can be detected as the forged device key index information by 
examining whether or not a pair of the device key index information 
19a (DI) and the check information P establishes a relationship of 
P=F(DI). 

Also, the check information may be digital signature data 
20 using a public key cryptographic method. That is, a digital 
signature is created using a secret signature key of a licensor for the 
device key index information 19a (DI) as the check information P. 
The check information P which is created as described above may be 
checked using a public signature verification key corresponding to 
25 the signature key of the licensor. 

Also, in this method, the licensor may issue, for the licensee, 
when the conversion F is disclosed to the licensee, together with the 
device key 110a, data which the check information P or data 
combining the device key information DI to the check information P 
30 are encrypted with a secret key about which the licensor only knows, 
and output the encrypted data together with the device key index 
information 19a. Further, a program for outputting the encrypted 
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data instead of the device key index information 19a may be 
enforced to be implemented in the content reproduction apparatus 1. 
In this case, the licensor can obtain the encrypted data from the 
content reproduction apparatus using the program and verify 
5 whether the device key index information 19a is forged or not from 
the data obtained by decrypting the encrypted data with the secret 
key of the licensor. Here, the check information P is stored in the 
content reproduction apparatus. 

Further, the device key index information 19a may be directly 

10 written in the enclosure of the content reproduction apparatus 1 
instead of being displayed to the display apparatus and the like. 
FIG. 14 is an outside drawing of the content reproduction apparatus 
1. FIG. 15 is a drawing showing the content reproduction 
apparatus 1 when its cover is removed. The content reproduction 

15 apparatus 1 includes an enclosure la, a substrate lb and a device 
key index information display unit lc. 

FIG. 16 is a diagram showing an example of the device key 
index information display unit lc. In the device key index 
information display unit lc, numeric values indicating the device key 

20 index information 19a in the content reproduction apparatus 1 in 
hexadecimal numbers are described. The numeric values may be 
directly printed by a printing method such as laser printing, or be a 
board on which the device key index information 19a is printed that 
is attached by an adhesive method such as vises, adhesives, welding 

25 or the like. Specifically, for example, the value indicating, in 
hexadecimal numbers, the decryption information Iu disclosed in 
the relevant literature may be described. 

The cover of the content reproduction apparatus 1 may be 
held with screws, vises and the like in special shapes so that a 

30 general user cannot remove the cover. Furthermore, a place where 
the index information is displayed is not limited to the mentioned 
place and can be anywhere unless it can tell the index information of 
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the content reproduction apparatus 1. 

Although only some exemplary embodiments of this invention 
have been described in detail above, those skilled in the art will 
readily appreciate that many modifications are possible in the 
5 exemplary embodiments without materially departing from the 
novel teachings and advantages of this invention. Accordingly, all 
such modifications are intended to be included within the scope of 
this invention. 



10 Industrial Applicability 

The content reproduction apparatus according to the present 
invention has an effect that can obtain information (device key index 
information) relating to an individual key (device key) of the content 
reproduction apparatus embedded in the content reproduction 
15 apparatus by receiving an instruction from outside. For example, it 
is effective for a content reproduction apparatus and the like having 
a copyright protection function and holding secret information 
unique to each content reproduction apparatus. 
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